必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.42.174 attackbotsspam
non-SMTP command used
...
2020-10-09 02:13:07
139.59.42.174 attackspambots
non-SMTP command used
...
2020-10-08 18:11:01
139.59.42.69 attackspambots
Jan  1 02:49:15 ws12vmsma01 sshd[34437]: Invalid user elake from 139.59.42.69
Jan  1 02:49:17 ws12vmsma01 sshd[34437]: Failed password for invalid user elake from 139.59.42.69 port 47266 ssh2
Jan  1 02:56:10 ws12vmsma01 sshd[35398]: Invalid user guest from 139.59.42.69
...
2020-01-01 14:13:46
139.59.42.69 attack
Unauthorized connection attempt detected from IP address 139.59.42.69 to port 22
2020-01-01 05:54:49
139.59.42.69 attackspambots
Dec 28 11:29:15 dev0-dcde-rnet sshd[13126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.42.69
Dec 28 11:29:17 dev0-dcde-rnet sshd[13126]: Failed password for invalid user trenduser from 139.59.42.69 port 51024 ssh2
Dec 28 11:32:39 dev0-dcde-rnet sshd[13191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.42.69
2019-12-28 19:44:53
139.59.42.250 attack
Automatic report - XMLRPC Attack
2019-11-19 05:19:06
139.59.42.114 attackbots
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:45 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:52 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:54 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:59 +0100] "POST /[munged]: HTTP/1.1" 200 6872 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:29:06 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:29:13 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubun
2019-10-31 04:52:00
139.59.42.114 attack
Automatic report - XMLRPC Attack
2019-10-29 13:29:17
139.59.42.250 attackspambots
Automatic report - Banned IP Access
2019-10-28 16:58:08
139.59.42.250 attackbotsspam
Automatic report - XMLRPC Attack
2019-10-07 15:33:05
139.59.42.250 attackspambots
fail2ban honeypot
2019-09-26 16:35:12
139.59.42.211 attackspam
160/tcp 159/tcp 158/tcp...
[2019-06-15/08-12]243pkt,65pt.(tcp)
2019-08-13 00:55:59
139.59.42.211 attack
31.07.2019 22:39:18 Connection to port 146 blocked by firewall
2019-08-01 09:17:33
139.59.42.211 attack
Unauthorized connection attempt from IP address 139.59.42.211 on Port 143(IMAP)
2019-07-30 01:45:22
139.59.42.211 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-29 07:36:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.42.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46376
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.42.52.			IN	A

;; AUTHORITY SECTION:
.			225	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 154 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 17:37:50 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 52.42.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.42.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
34.87.159.243 attack
 TCP (SYN) 34.87.159.243:59127 -> port 26905, len 44
2020-06-30 07:09:34
52.35.54.128 attackspambots
Web application fingerprinting: Attack repeated for 24 hours 52.35.54.128 - - [29/Jun/2020:22:47:23 +0300] "GET / HTTP/1.1" 200 4773 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36"
52.35.54.128 - - [29/Jun/2020:22:47:23 +0300] "GET / HTTP/1.1" 200 4773 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36"
2020-06-30 06:45:07
123.30.149.76 attackspam
k+ssh-bruteforce
2020-06-30 06:53:59
94.156.119.230 attack
(imapd) Failed IMAP login from 94.156.119.230 (BG/Bulgaria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 30 00:49:14 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=94.156.119.230, lip=5.63.12.44, session=<2cJ0xT6pwZFenHfm>
2020-06-30 06:58:40
114.42.26.10 attackspam
Honeypot attack, port: 81, PTR: 114-42-26-10.dynamic-ip.hinet.net.
2020-06-30 07:08:35
103.23.50.82 attackbots
Icarus honeypot on github
2020-06-30 07:06:17
112.85.42.178 attackspambots
Jun 29 23:46:27 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2
Jun 29 23:46:31 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2
Jun 29 23:46:35 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2
Jun 29 23:46:39 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2
...
2020-06-30 06:52:31
94.102.57.137 attack
Jun 30 00:55:49 debian-2gb-nbg1-2 kernel: \[15729990.686864\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.57.137 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=18911 PROTO=TCP SPT=50717 DPT=8640 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-30 07:08:48
201.243.111.114 attackbots
Honeypot attack, port: 445, PTR: 201-243-111-114.dyn.dsl.cantv.net.
2020-06-30 06:43:28
178.40.208.132 attackspam
Automatic report - Port Scan Attack
2020-06-30 07:13:27
46.191.226.163 attackbotsspam
20/6/29@15:47:06: FAIL: Alarm-Intrusion address from=46.191.226.163
...
2020-06-30 07:06:50
119.29.235.129 attackbotsspam
SSH Invalid Login
2020-06-30 06:56:11
218.92.0.219 attack
Jun 30 00:46:08 * sshd[31500]: Failed password for root from 218.92.0.219 port 20979 ssh2
2020-06-30 06:46:19
101.12.61.143 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-06-30 06:45:38
139.59.40.233 attack
139.59.40.233 - - [29/Jun/2020:23:29:59 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.40.233 - - [29/Jun/2020:23:30:02 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.40.233 - - [29/Jun/2020:23:30:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-30 07:07:58

最近上报的IP列表

139.59.4.9 139.59.57.175 139.59.60.8 139.59.63.220
139.59.65.142 139.59.6.190 139.59.58.171 139.59.68.97
139.59.61.61 139.59.6.80 139.59.66.50 139.59.61.14
139.59.7.192 139.59.66.44 139.59.7.40 139.59.71.27
139.59.75.228 139.59.72.138 139.59.72.87 139.59.72.54